Skip to content

Conversation

@saschagrunert
Copy link
Member

@saschagrunert saschagrunert commented Nov 13, 2025

What type of PR is this?

/kind bug

What this PR does / why we need it:

This PR pins docker-ce-cli to version 24.0.x in the k8s-ci-builder image to ensure API version 1.43 compatibility with Docker-in-Docker in CI environments.

While docker-ce was already pinned to 24.0.x, the docker-ce package has an unversioned dependency on docker-ce-cli. This allows APT to install the latest available docker-ce-cli (currently 29.0.0 with API 1.52), which is incompatible with the DinD setup that only supports API 1.43.

Which issue(s) this PR fixes:

Follow-up to #4183

Special notes for your reviewer:

This is the same fix as #4183, but applied to the k8s-ci-builder image instead of k8s-cloud-builder. The k8s-ci-builder image installs docker-ce (full daemon) while k8s-cloud-builder only installs docker-ce-cli, but both suffer from the same issue where the CLI can be upgraded to an incompatible version.

Does this PR introduce a user-facing change?

Pin docker-ce-cli to version 24.0.x in k8s-ci-builder image for API 1.43 compatibility with CI DinD environments

The latest docker-ce-cli package (API version 1.52) is incompatible
with the Docker-in-Docker setup in CI, which supports a maximum API
version of 1.43. This causes build failures with the error:
"client version 1.52 is too new. Maximum supported API version is 1.43"

While docker-ce was already pinned to 24.0.x, the docker-ce package
dependency on docker-ce-cli is unversioned, allowing APT to install
the latest docker-ce-cli (currently 29.0.0 with API 1.52) even when
the daemon is pinned.

Docker 24.0.x uses API version 1.43, making it compatible with the
current CI DinD environment.

This is a follow-up to kubernetes#4183 which fixed the same issue for
k8s-cloud-builder.

Signed-off-by: Sascha Grunert <sgrunert@redhat.com>
@k8s-ci-robot k8s-ci-robot added release-note Denotes a PR that will be considered when it comes time to generate release notes. kind/bug Categorizes issue or PR as related to a bug. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. needs-priority labels Nov 13, 2025
@k8s-ci-robot k8s-ci-robot added area/release-eng Issues or PRs related to the Release Engineering subproject approved Indicates a PR has been approved by an approver from all required OWNERS files. sig/release Categorizes an issue or PR as relevant to SIG Release. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels Nov 13, 2025
@saschagrunert
Copy link
Member Author

@BenTheElder @dims PTAL

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Nov 13, 2025
@k8s-ci-robot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: cpanato, saschagrunert

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dims
Copy link
Member

dims commented Nov 13, 2025

/approve
/lgtm

@k8s-ci-robot k8s-ci-robot merged commit 6d063ee into kubernetes:master Nov 13, 2025
12 checks passed
@saschagrunert saschagrunert deleted the fix-ci-builder-docker-cli-api-version branch November 13, 2025 13:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/release-eng Issues or PRs related to the Release Engineering subproject cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. kind/bug Categorizes issue or PR as related to a bug. lgtm "Looks good to me", indicates that a PR is ready to be merged. needs-priority release-note Denotes a PR that will be considered when it comes time to generate release notes. sig/release Categorizes an issue or PR as relevant to SIG Release. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants